prime-apis.amazon.jp

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:7e:5a:4e:7c:47:31:e0:75:b7:d8:93:91:1f:21:18 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prime-apis.amazon.jp

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:7e:5a:4e:7c:47:31:e0:75:b7:d8:93:91:1f:21:18
Serial Number (int): 7302201018223182896220612256241492248
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f2:68:07:f1:30:47:0d:06:35:b6:a7:aa:5d:06:4f:e1:9c:e7:ff:54
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 52:0b:a1:25:e6:f0:e0:e6:64:c2:81:4b:47:55:9c:14:b4:79:83:7d
Fingerprint (sha256): 50:71:19:61:ab:61:f2:eb:be:28:91:53:34:87:40:91:26:59:f9:ab:da:66:b5:e3:42:f3:b9:f7:b6:de:ac:32

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate prime-apis.amazon.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prime-apis.amazon.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prime-apis.amazon.jp

Other certificates including the domain name amazon.jp

(limited to 100 certificates)
*.peg.a2z.com
nonprofitcentral.amazon.com
dl.amazon.co.jp
aeswidget.amazon.jp
*.peg.a2z.com
amazonux.com
membership.amazon.com
www.amazon.co.jp
aeswidget.amazon.jp
*.peg.a2z.com
www.amazon.co.jp
*.peg.a2z.com
dpreview.in
www.amazon.co.jp
*.peg.a2z.com
membership.amazon.com
*.peg.a2z.com
amazonux.com
*.peg.a2z.com
www.amazon.co.jp
payments.amazon.co.jp
*.peg.a2z.com
pay-api.amazon.jp
dl.amazon.co.jp
credential-locker-service.amazon.jp
*.peg.a2z.com
www.amazonmusic.com
photos.amazon.jp
physicalstoretech.amazon.jp
jobfinder.amazon.com
relay.amazon.jp
*.peg.a2z.com
www.amazon.co.jp
www.amazonmusic.com
aeswidget.amazon.jp
api.relay.amazon.jp
forecasting-fe.amazon.com
dl.amazon.co.jp
photos.amazon.jp
aeswidget.amazon.jp
dl.amazon.co.jp
membership.amazon.com
www.amazon.co.jp
sdu.amazon.jp
www.amazon.co.jp
dl.amazon.co.jp
payments.amazon.co.jp
data-exchange.amazon.com
amazonux.com
regions-beta.corp.amazon.com
www.amazon.co.jp
photos.amazon.jp
www.amazon.co.jp
dl.amazon.co.jp
xb-node-report.amazon.jp
www.amazon.co.jp
membership.amazon.com
*.peg.a2z.com
www.amazonmusic.com
data-exchange.amazon.com
*.peg.a2z.com
aeswidget.amazon.jp
www.amazon.co.jp
www.amazon.co.jp
dl.amazon.co.jp
sdu.amazon.jp
edgeflow-dp.aero.4d5ad1d2b-frontier.amazon.co.jp
*.peg.a2z.com
payments.amazon.co.jp
nonprofitcentral.amazon.com
static.prime-apis.amazon.jp
aeswidgets.amazon.jp
www.amazon.co.jp
www.amazon.co.jp
aeswidget.amazon.jp
payments.amazon.co.jp
www.amazon.co.jp
www.amazon.co.jp
aeswidgets.amazon.jp
dl.amazon.co.jp
dl.amazon.co.jp
pay-api.amazon.jp
aeswidget.amazon.jp
dl.amazon.co.jp
sdu.amazon.jp
dl.amazon.co.jp
prime-apis.amazon.jp
www.amazon.co.jp
www.amazon.co.jp
nonprofitcentral.amazon.com
payments.amazon.co.jp
dl.amazon.co.jp
jobfinder.amazon.com
s1.amazon.co.jp
payments.amazon.co.jp
payments.amazon.co.jp
www.amazon.co.jp
edgeflow-dp.aero.4d5ad1d2b-frontier.amazon.co.jp
*.peg.a2z.com
*.peg.a2z.com

Certificate

The complete raw certificate details for prime-apis.amazon.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvcwLEwXN7WDnFQTgfMW
I1w4bj23GDcm4KjNi5RmPpS8hyB3mSBfKsNlxNjQjlx7NiUAMPV90lTSRR5T7jN0
yETwn0dCyq07QEMRufFMGQNxHtwkj9Yh+dec/+2zWlVUw5r8oVNqUBAK4DZ60aNu
5Wq7d5CLan8KS2J1PuN9t1UdnWtWK7mfgZ+aJIioA9yazEebxjqhIJkJU+/RnByN
tPT5vX1jB+Rzkw4VjATA8MsS+jBtMDnSOB3bcHuLVBbJIGylKV3IudPnCjM7YJXL
QJPJo0HcWuxdRugRNMn4b9RdlXroo4o4T8FZOPDofuhsce3VTvqhIOPxZvJNKMBI
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7302201018223182896220612256241492248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prime-apis.amazon.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20067545217199977051069546092464819859455137737819901156355483585994610298945699048000521108003729621098563243588758616124871877895679089118214201326898394915619565165075943239970028100462318304107751337084680789277973607835176168357814227761043431672432141580935140055634482995084375926162834682776604115687733095312762159449305432832577858565524392861839906564787771943417107256881127400361277981969974073775408341911695314367846580009714081798307949055199033570957381638801698844266723448674555320616843860947121930345018095172811852475795762948821856131523964467373584188522759321124371818583855921703733130447053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f26807f130470d0635b6a7aa5d064fe19ce7ff54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime-apis.amazon.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00821f3e94fe68fac01275e4a97e1e92cf435a7d2fa4993c2ba9e4d61b506283fbe785b7ec51802d2ecf7546c026713c9633a147a92f4b143dd2bf170239d8396629b3911a4e93a296a6bae9d408aa9b7c97eaf6ef364af3a0181ceb2848b686703086247535aecbeec553b4bdc9583f7276eb4c76dc7a8827f706ad60063cdbf46889ffccbc3c4f8e20e2d3cf31932c9be43aa41116dfeeba869f0d1c85992e5cd11e3a25c92cca43734fd0200611bda1574927c0abe310e32173cd9684b8bf2296de962d4e9c7108609f36a32ba1953017a950e9c2f5d10e1924a36cb08b73926971b1a21ed86cd88a7da9282b8d4384e4b52e29c9bb74fabad7606307579f62